US6990578B1 - Method and apparatus for encrypting electronic messages composed using abbreviated address books - Google Patents
Method and apparatus for encrypting electronic messages composed using abbreviated address books Download PDFInfo
- Publication number
- US6990578B1 US6990578B1 US09/431,344 US43134499A US6990578B1 US 6990578 B1 US6990578 B1 US 6990578B1 US 43134499 A US43134499 A US 43134499A US 6990578 B1 US6990578 B1 US 6990578B1
- Authority
- US
- United States
- Prior art keywords
- message
- sender
- certificate
- mail system
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Fee Related
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L51/00—User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L51/00—User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
- H04L51/21—Monitoring or handling of messages
- H04L51/222—Monitoring or handling of messages using geographical location information, e.g. messages transmitted or received in proximity of a certain spot or area
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0823—Network architectures or network communication protocols for network security for authentication of entities using certificates
Definitions
- This invention relates to distributed groupware systems, including e-mail, and address books and information management.
- Each server connects clients, routes mail, stores common information in one or more databases and determines how databases are shared among users. Users may also store in local workstation databases managed by the client software.
- the servers and the users are all connected together by a network. More recently, the Internet has arisen as a global, public information service which is becoming more and more popular.
- An extension of the basic Notes system called a Domino Web Server allows Notes databases to be accessed through a conventional web browser, such as Netscape NavigatorTM or Microsoft Internet ExplorerTM. Users can then access Notes databases without installing Notes client software on every computer.
- the Notes system also allows multiples copies, called “replicas,” of the same database to be kept on different servers or workstations.
- Replicas speed operation of the system by allowing users on a variety of network and at a variety of locations to access the same information.
- Replicas exchange information in a process called “replication” in order to make the information in each replica identical to the information in other replicas over time. For example, users in a first location can make changes to the information in a replica located in a server associated with the first location at the same time that other users make changes to information in a second replica of the same database located in a second server at another location. Later, during the replication process, when the first and second servers replicate, information will be exchanged among the replicas to make the information the same in both replicas.
- the Notes system can be configured for one or more “domains”, each of which is an organization of Notes servers that are centrally managed for server administration and security. All servers in a domain share a single database called a “public address book.”
- the public address book provides a directory of Notes servers, users, certifiers, domains, groups, connections and profiles.
- the public address book can also contain security information for each user that can include, for example, a digital “certificate” which is often a public key from a public/private key pair that is used with a conventional encryption/decryption algorithm to encrypt and decrypt e-mail message content.
- the Notes system contains a number of features that make its use easier and more efficient. For example, a feature called “look ahead typing” allows a user to enter the beginning portion of a recipient's name in an e-mail address field and the Notes system will access the public address book to retrieve matching information to complete the name and provide the related information. Searching by recipient name is also provided. When a match is detected by the Notes system, additional information such as whether the mail should be encrypted, and, if so, the recipient's digital certificate can also be retrieved from the address book.
- a feature called “look ahead typing” allows a user to enter the beginning portion of a recipient's name in an e-mail address field and the Notes system will access the public address book to retrieve matching information to complete the name and provide the related information. Searching by recipient name is also provided. When a match is detected by the Notes system, additional information such as whether the mail should be encrypted, and, if so, the recipient's digital certificate can also be retrieved from the address book.
- a user can use the Notes system with a remote or mobile computer, such as a laptop, that is not connected to a network or the Internet.
- a remote or mobile computer such as a laptop
- a user makes a replica of a database with the remote computer while the remote computer is connected to the Notes system via a network. The user then disconnects from the network and can operate in a normal manner.
- a replication operation is performed and the database in the remote computer is updated with the database replica in the Notes system.
- the digital certificates which are used to encrypt e-mail are typically 1K–2K bytes in length, but may be up to 20K bytes in length. Because of this significant length, they are typically not included in the directory catalog. Therefore, if a user operating remotely and “off-line” attempts to send e-mail to a recipient where the e-mail must be encrypted, the digital certificate will not be available. Since information in the directory catalog records whether a user has a certificate or not, the e-mail routine will not allow the mail to be composed.
- the sender's mail program when mail is to be sent by an off-line user to a recipient who holds a digital certificate, the sender's mail program allows the sender to compose the mail, but the mail is placed in plain text in the sender's local outbox and flagged for subsequent encryption.
- the sender later connects to a mail server to send the outgoing mail, the sender's mail software, in response to the flagged mail will request the recipient's certificate from the server and use the received certificate to encrypt the mail message before it leaves the sender's workstation.
- the certificate is discarded.
- a message is sent to the sender informing him that the certificate cannot be located and the mail cannot be sent in encrypted form.
- the sender has an option to resend the mail in unencrypted form.
- FIG. 1 is a schematic block diagram of a conventional remote user connected, via a network, to a groupware system illustrating replicated databases in the remote user's computer and the groupware server.
- FIG. 2 is a block schematic illustrating a known process of creating an abbreviated address book for use on a remote client from a plurality of public address books available on groupware servers.
- FIG. 3 is a block schematic diagram of a conventional remote client illustrating a replicated database, abbreviated address book and the relation of the client software to the electronic mail inbox and outbox.
- FIG. 4 is a block schematic diagram illustrating the components of an outbox used in the encryption scheme of the present invention.
- FIG. 5 is a flowchart which illustrates the steps performed in generating a mail message for a recipient who has a digital certificate and placing the message in an outbox using the principles of the present invention.
- FIG. 6 is a flowchart which illustrates the steps performed in sending mail in an outbox to a recipient who has a digital certificate using the principles of the present invention.
- FIG. 1 illustrates a prior art groupware system in which a remote, or mobile, user can be connected, via a network, to a server which provides electronic mail, calendar and database services to the user.
- a Notes groupware system as previously described, is used as an illustrative example.
- other available groupware systems such as the Exchange groupware system, developed and marketed by the Microsoft corporation, Redmond, Wash., can also be used in accordance with the principles of the present invention.
- a remote computer such as a laptop computer 102
- the laptop computer 102 contains a database replica 104 which is, in turn, a copy of the database replica 110 associated with the groupware server 108 .
- the groupware system insures that, over time, databases 104 and 110 contain the same information.
- the user of laptop 102 can disconnect laptop 102 from network 106 and operate “off line”.
- the user of computer 102 can access database 104 which is stored in the local memory of computer 102 .
- database 104 may contain a directory catalog or an abbreviated address book which can contain a directory of users that are connected to notes server 108 and other notes servers (not shown on FIG. 1 .)
- Database 104 may contain an abbreviated directory or directory catalog. Such an abbreviated directory is created in the manner shown in schematic form in FIG. 2 .
- three public address books 200 , 202 and 204 also called “source domain directories”, are used to generate a single abbreviated address book or directory catalog 214 .
- a directory server 212 generates and maintains the directory catalog 214 .
- replicas 206 , 208 and 210 of public address books 200 , 202 and 204 are created in the server 212 .
- a special program 216 in server 212 called an aggregator, populates the directory catalog database 214 and keeps the catalog 214 in synchronism with the source domain directories 200 , 202 and 204 .
- the directory server 212 takes the changes from the multiple sources 202 , 204 and 206 and then replicates the changes made to the source domain directories into the catalog 214 , eliminating duplicates. However, all of the information in each entry in source domain directories 200 , 202 and 204 is not copied to abbreviated address book 214 . Instead, a record is created in address book 214 by aggregator 216 which record is an abbreviated or condensed version of an address book entry. Information which consumes a disproportionate share of space in the original entry is eliminated in the condensed entry. Such information includes digital certificates which can consume up to 20 K bytes.
- Replicas of the directory catalog 214 can then be distributed throughout the enterprise in a variety of known manners, including replicating the directory catalog 214 to the groupware servers, downloading the directory catalog 214 to client workstations, via e-mail or database links, and pushing the directory catalog to client workstations during the workstation setup process.
- FIG. 3 illustrates, in a schematic form, contents of memory 302 of a remote client such as client 102 ( FIG. 1 .)
- Memory 302 includes a replicated database 304 and a directory catalog 306 .
- the directory catalog 306 is illustrated as independent of the replicated database 304 , it may actually be part of the replicated database 304 .
- the database and directory catalog is used by a groupware client 308 in the process of storing and retrieving information and generating and receiving mail messages.
- the groupware client connects to the groupware mail system, via network 318 , by means of an outbox 310 and an inbox 314 .
- messages arriving at the client are transferred, via an incoming network connection 312 to the inbox 314 .
- the messages can then later be displayed by the client software 308 to the user for reading and response.
- the client software 308 retrieves the user's digital certificate over the network 318 from a public address book associated with the groupware server. The retrieved digital certificate is then used to encrypt the mail message. The encrypted mail message is then placed in the outbox 310 where subsequently it is, either automatically sent to the groupware server, via connection 312 and network 318 , or sent at a later time in response to a directive from the user.
- the client software 308 can use the directory catalog 306 to obtain information about the recipient, including the recipient's name and mail address.
- the recipient's digital certificate is not generally included in the directory catalog 306 , if the directory catalog 306 indicates that the recipient holds a digital certificate, it is not possible for the mail message to be encrypted and placed in the outbox 310 . Therefore, it is not possible, using the conventional system, to compose an mail message to a recipient who holds a digital certificate when the mail client 308 is not connected to the network 318 .
- FIG. 4 illustrates a modification of the standard mail routine in accordance with the principles of the present invention.
- the recipient's name and mail address are obtained by the client software 308 from the directory catalog 306 and placed in the header 402 of the mail message 403 .
- the directory catalog 306 also contains information indicating that the recipient holds a digital certificate, and, if this is the case, a flag 405 is placed in the mail header 402 to indicate that a certificate is required.
- the client software 308 places the message 403 , in plain text form, into outbox 400 as indicated schematically by arrow 406 .
- the outgoing mail processing routine associated with outbox 310 which would normally send the message 403 in outbox 410 via the network 318 to the groupware server, instead responds to the flag 405 in the mail header 402 by sending a request (indicated schematically as request 412 ) to the groupware server requesting the recipient's digitial certification from the associated public address book.
- the certification is requested by using recipient information in the mail header 402 such as the recipient's ID or recipient's name to identify the recipient in the public address book.
- the request is sent as indicated schematically by arrow 416 to the public address book associated with the groupware server.
- the digital certificate 410 is available, it is returned, as indicated schematically by arrow 418 , and provided to an encryption mechanism 408 .
- the encryption mechanism 408 uses the digital certificate to encrypt the mail content 404 and meessage including the header 402 and the encrypted content 414 is then sent as indicated schematically by arrow 416 to the groupware server.
- the recipient's digital certificate 410 is then discarded.
- the certificate may be retained for a predetermined period of time in order to encrypt further messages to be sent to the same recipient.
- FIG. 5 is a flowchart illustrating the steps carried out by the client software during the generation of outgoing mail to a recipient who possesses a digital certificate.
- the routine illustrated in FIG. 5 is performed to complete the outgoing mail process. This process starts in step 500 and proceeds to step 502 in which a determination is made whether the user is off line. If the user is off line, the process proceeds to step 504 in which the encryption flag ( 405 in FIG. 4 ) is set in the header 402 of message 403 . Then the unencrypted message is placed in the outbox in step 508 and the process finishes in step 514 .
- step 506 a request is made to the mail server for the recipient's certificate.
- the certificate could be obtained from a local database.
- the certificate is used, in step 510 , to encrypt the mail content.
- step 512 the encrypted mail is placed in the outbox and the process ends in step 514 .
- FIG. 6 illustrates the process used to process outgoing mail in the outbox to a recipient who holds a digital certificate. This process might be initiated automatically when an off-line user logs on to the mail network, or might be initiated under an explicit user command.
- the process starts in step 600 and proceeds to step 602 where the message header is examined to determine whether the encryption flag has been set. If the encryption flag has not been set, then the mail has already been encrypted and is sent to the mail server in step 614 . The process then finishes in step 616 .
- step 602 the encryption flag in the message header indicates that the mail is unencrypted
- step 604 information in the message header is used to request the recipient's digital certification from a public address book associated with the groupware server.
- step 606 a decision is made whether the certification is available. If the certification is available, it is used to encrypt the mail content as indicated in step 608 .
- step 612 the certification is discarded. Subsequently, the encrypted mail content is sent to the mail server as indicated in step 614 and the process ends in step 616 .
- step 606 it is determined that the recipient's certificate is not available, then in step 610 , the sender is informed and given the choice to send the mail in unencrypted form. Then the routine ends in step 616 . If the recipient does not hold a digital certificate, then the mail can be sent in an unencrypted form.
- a software implementation of the above-described embodiment may comprise a series of computer instructions either fixed on a tangible medium, such as a computer readable media, e.g. a diskette, a CD-ROM, a ROM memory, or a fixed disk, or transmissible to a computer system, via a modem or other interface device over a medium.
- the medium either can be a tangible medium, including, but not limited to, optical or analog communications lines, or may be implemented with wireless techniques, including but not limited to microwave, infrared or other transmission techniques. It may also be the Internet.
- the series of computer instructions embodies all or part of the functionality previously described herein with respect to the invention.
- Such computer instructions can be written in a number of programming languages for use with many computer architectures or operating systems. Further, such instructions may be stored using any memory technology, present or future, including, but not limited to, semiconductor, magnetic, optical or other memory devices, or transmitted using any communications technology, present or future, including but not limited to optical, infrared, microwave, or other transmission technologies. It is contemplated that such a computer program product may be distributed as a removable media with accompanying printed or electronic documentation, e.g., shrink wrapped software, pre-loaded with a computer system, e.g., on system ROM or fixed disk, or distributed from a server or electronic bulletin board over a network, e.g., the Internet or World Wide Web.
- a removable media with accompanying printed or electronic documentation, e.g., shrink wrapped software, pre-loaded with a computer system, e.g., on system ROM or fixed disk, or distributed from a server or electronic bulletin board over a network, e.g., the Internet or World Wide Web.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Information Transfer Between Computers (AREA)
Abstract
When electronic mail is to be sent by an off-line user to a recipient who holds a digital certificate, the sender's mail program allows the sender to compose the mail, but the mail is placed in plain text in the sender's local outbox and flagged for subsequent encryption. When the sender later connects to a mail server to send the outgoing mail, the sender's mail software, in response to the flagged mail will request the recipient's certificate from the server and use the received certificate to encrypt the mail message before it leaves the sender's workstation. In accordance with one embodiment of the invention, after using a digital certificate to encrypt a mail message, the certificate is discarded. In accordance with another embodiment, if the certificate is not available or located by the mail server, a message is sent to the sender informing him that the certificate cannot be located and the mail cannot be sent in encrypted form. At that point, the sender has an option to resend the mail in unencrypted form.
Description
This invention relates to distributed groupware systems, including e-mail, and address books and information management.
Initially, computer systems were designed to support large organizations because the expense of early computers required that they address major organizational goals. These early computer systems included large mainframe minicomputer applications. However, the spread of personal computers created large markets for applications designed for individual users, such as spreadsheets and word processors. The cost of computation soon became inexpensive enough to be available to all members of some groups and a technological infrastructure, including networks and associated software, also became available. Both of these latter facts encouraged applications which supported communication and coordination between individual computers users. These interactive applications became more popular and, in the mid-1980s, the terms “groupware”, “collaborative computing”, “workgroup computing”, and “multi-user applications” were coined to describe such interactive or collaborative applications.
Conferencing applications, including desktop conferencing and videoconferencing, electronic mail, meeting support systems and group calendars are examples of groupware. However, early groupware systems suffered from the lack of integrated applications which allowed the different pieces of groupware system to operate together. Subsequently, several companies developed integrated groupware systems. One of the more popular of these integrated systems is the Notes™ groupware system developed and marketed by the Lotus Corporation, 55 Cambridge Parkway, Cambridge, Mass. “The Notes system is an information manager for workgroups which allows a group of people to share information across a computer network and combines e-mail, a shared calendar and shared databases in a client/server configuration. A Notes system consists of end-user workstation programs called “Notes clients” and one or more central server programs which provides services to the end users. Each server connects clients, routes mail, stores common information in one or more databases and determines how databases are shared among users. Users may also store in local workstation databases managed by the client software. The servers and the users are all connected together by a network. More recently, the Internet has arisen as a global, public information service which is becoming more and more popular. An extension of the basic Notes system called a Domino Web Server allows Notes databases to be accessed through a conventional web browser, such as Netscape Navigator™ or Microsoft Internet Explorer™. Users can then access Notes databases without installing Notes client software on every computer.
The Notes system also allows multiples copies, called “replicas,” of the same database to be kept on different servers or workstations. Replicas speed operation of the system by allowing users on a variety of network and at a variety of locations to access the same information. Replicas exchange information in a process called “replication” in order to make the information in each replica identical to the information in other replicas over time. For example, users in a first location can make changes to the information in a replica located in a server associated with the first location at the same time that other users make changes to information in a second replica of the same database located in a second server at another location. Later, during the replication process, when the first and second servers replicate, information will be exchanged among the replicas to make the information the same in both replicas.
In use, the Notes system can be configured for one or more “domains”, each of which is an organization of Notes servers that are centrally managed for server administration and security. All servers in a domain share a single database called a “public address book.” The public address book provides a directory of Notes servers, users, certifiers, domains, groups, connections and profiles. The public address book can also contain security information for each user that can include, for example, a digital “certificate” which is often a public key from a public/private key pair that is used with a conventional encryption/decryption algorithm to encrypt and decrypt e-mail message content.
The Notes system contains a number of features that make its use easier and more efficient. For example, a feature called “look ahead typing” allows a user to enter the beginning portion of a recipient's name in an e-mail address field and the Notes system will access the public address book to retrieve matching information to complete the name and provide the related information. Searching by recipient name is also provided. When a match is detected by the Notes system, additional information such as whether the mail should be encrypted, and, if so, the recipient's digital certificate can also be retrieved from the address book.
It is also possible for a user to use the Notes system with a remote or mobile computer, such as a laptop, that is not connected to a network or the Internet. In order to operate off-line, a user makes a replica of a database with the remote computer while the remote computer is connected to the Notes system via a network. The user then disconnects from the network and can operate in a normal manner. When the user later reconnects to the network, a replication operation is performed and the database in the remote computer is updated with the database replica in the Notes system.
In order for features such as the type-ahead and searching function to be available to a remote user, a copy of the public address book must also be placed on the remote computer. However, in large enterprises which may have many Notes domains, several different public address books may exist. If all of these are combined, to form one large address book the overall size would generally be too large for most remote computers, such as laptop computers. Therefore, the various public address books are compressed or abbreviated by means of a program called an “aggregator” which generates an abbreviated address book called a “directory catalog” which contains some of the information of the public address books, but is much smaller in size.
A problem arises when a remote user who is not connected to the Notes system attempts to use such a directory catalog to send an e-mail to a recipient listed in the catalog. The digital certificates which are used to encrypt e-mail are typically 1K–2K bytes in length, but may be up to 20K bytes in length. Because of this significant length, they are typically not included in the directory catalog. Therefore, if a user operating remotely and “off-line” attempts to send e-mail to a recipient where the e-mail must be encrypted, the digital certificate will not be available. Since information in the directory catalog records whether a user has a certificate or not, the e-mail routine will not allow the mail to be composed.
Therefore, there is a need to provide e-mail capabilities to an off-line groupware user who is operating with an abbreviated address book.
In accordance with one illustrative embodiment of the invention, when mail is to be sent by an off-line user to a recipient who holds a digital certificate, the sender's mail program allows the sender to compose the mail, but the mail is placed in plain text in the sender's local outbox and flagged for subsequent encryption. When the sender later connects to a mail server to send the outgoing mail, the sender's mail software, in response to the flagged mail will request the recipient's certificate from the server and use the received certificate to encrypt the mail message before it leaves the sender's workstation.
In accordance with one embodiment of the invention, after using a digital certificate to encrypt a mail message, the certificate is discarded.
In accordance with another embodiment, if the certificate is not available or located by the mail server, a message is sent to the sender informing him that the certificate cannot be located and the mail cannot be sent in encrypted form. At that point, the sender has an option to resend the mail in unencrypted form.
The above and further advantages of the invention may be better understood by referring to the following description in conjunction with the accompanying drawings in which:
As illustrated in FIG. 1 , a remote computer, such as a laptop computer 102, can be connected, via network 106, to a groupware server 108. The laptop computer 102 contains a database replica 104 which is, in turn, a copy of the database replica 110 associated with the groupware server 108. As previously mentioned, the groupware system insures that, over time, databases 104 and 110 contain the same information. After any updates to database replicas 104 and 110 have been performed, the user of laptop 102 can disconnect laptop 102 from network 106 and operate “off line”. In particular, the user of computer 102 can access database 104 which is stored in the local memory of computer 102. As previously mentioned, database 104 may contain a directory catalog or an abbreviated address book which can contain a directory of users that are connected to notes server 108 and other notes servers (not shown on FIG. 1 .)
The directory server 212 takes the changes from the multiple sources 202, 204 and 206 and then replicates the changes made to the source domain directories into the catalog 214, eliminating duplicates. However, all of the information in each entry in source domain directories 200, 202 and 204 is not copied to abbreviated address book 214. Instead, a record is created in address book 214 by aggregator 216 which record is an abbreviated or condensed version of an address book entry. Information which consumes a disproportionate share of space in the original entry is eliminated in the condensed entry. Such information includes digital certificates which can consume up to 20 K bytes.
The first time the aggregator 216 runs, it opens all of the public address books replicas 206, 208 and 210 on the directory server 212 and creates reduced entries from these replicas, thereby creating the directory catalog 214. Replicas of the directory catalog 214 can then be distributed throughout the enterprise in a variety of known manners, including replicating the directory catalog 214 to the groupware servers, downloading the directory catalog 214 to client workstations, via e-mail or database links, and pushing the directory catalog to client workstations during the workstation setup process.
In addition, when the client is connected to the network 318 and a mail message is to be sent to a recipient who is in possession of a digital certification, the client software 308 retrieves the user's digital certificate over the network 318 from a public address book associated with the groupware server. The retrieved digital certificate is then used to encrypt the mail message. The encrypted mail message is then placed in the outbox 310 where subsequently it is, either automatically sent to the groupware server, via connection 312 and network 318, or sent at a later time in response to a directive from the user.
In the case where client is not connected to the network 318 when a mail message is generated, the client software 308 can use the directory catalog 306 to obtain information about the recipient, including the recipient's name and mail address. However, since the recipient's digital certificate is not generally included in the directory catalog 306, if the directory catalog 306 indicates that the recipient holds a digital certificate, it is not possible for the mail message to be encrypted and placed in the outbox 310. Therefore, it is not possible, using the conventional system, to compose an mail message to a recipient who holds a digital certificate when the mail client 308 is not connected to the network 318.
At a later time when the remote client is connected to the groupware network 318, the outgoing mail processing routine associated with outbox 310, which would normally send the message 403 in outbox 410 via the network 318 to the groupware server, instead responds to the flag 405 in the mail header 402 by sending a request (indicated schematically as request 412) to the groupware server requesting the recipient's digitial certification from the associated public address book. The certification is requested by using recipient information in the mail header 402 such as the recipient's ID or recipient's name to identify the recipient in the public address book. The request is sent as indicated schematically by arrow 416 to the public address book associated with the groupware server.
If the digital certificate 410 is available, it is returned, as indicated schematically by arrow 418, and provided to an encryption mechanism 408. The encryption mechanism 408 uses the digital certificate to encrypt the mail content 404 and meessage including the header 402 and the encrypted content 414 is then sent as indicated schematically by arrow 416 to the groupware server. In a preferred embodiment, the recipient's digital certificate 410 is then discarded. Alternatively, the certificate may be retained for a predetermined period of time in order to encrypt further messages to be sent to the same recipient.
Alternatively, if, in step 502, a determination is made that the user is on line, then the process proceeds to step 506 where a request is made to the mail server for the recipient's certificate. Alternatively, the certificate could be obtained from a local database. The certificate is used, in step 510, to encrypt the mail content. In step 512, the encrypted mail is placed in the outbox and the process ends in step 514.
Alternatively, if, in step 602, the encryption flag in the message header indicates that the mail is unencrypted, then the process proceeds to step 604 where information in the message header is used to request the recipient's digital certification from a public address book associated with the groupware server. In step 606, a decision is made whether the certification is available. If the certification is available, it is used to encrypt the mail content as indicated in step 608. Next, in step 612, the certification is discarded. Subsequently, the encrypted mail content is sent to the mail server as indicated in step 614 and the process ends in step 616.
Alternatively, if in step 606 it is determined that the recipient's certificate is not available, then in step 610, the sender is informed and given the choice to send the mail in unencrypted form. Then the routine ends in step 616. If the recipient does not hold a digital certificate, then the mail can be sent in an unencrypted form.
A software implementation of the above-described embodiment may comprise a series of computer instructions either fixed on a tangible medium, such as a computer readable media, e.g. a diskette, a CD-ROM, a ROM memory, or a fixed disk, or transmissible to a computer system, via a modem or other interface device over a medium. The medium either can be a tangible medium, including, but not limited to, optical or analog communications lines, or may be implemented with wireless techniques, including but not limited to microwave, infrared or other transmission techniques. It may also be the Internet. The series of computer instructions embodies all or part of the functionality previously described herein with respect to the invention. Those skilled in the art will appreciate that such computer instructions can be written in a number of programming languages for use with many computer architectures or operating systems. Further, such instructions may be stored using any memory technology, present or future, including, but not limited to, semiconductor, magnetic, optical or other memory devices, or transmitted using any communications technology, present or future, including but not limited to optical, infrared, microwave, or other transmission technologies. It is contemplated that such a computer program product may be distributed as a removable media with accompanying printed or electronic documentation, e.g., shrink wrapped software, pre-loaded with a computer system, e.g., on system ROM or fixed disk, or distributed from a server or electronic bulletin board over a network, e.g., the Internet or World Wide Web.
Although an exemplary embodiment of the invention has been disclosed, it will be apparent to those skilled in the art that various changes and modifications can be made which will achieve some of the advantages of the invention without departing from the spirit and scope of the invention. For example, it will be obvious to those reasonably skilled in the art that, although the description was directed to a particular groupware system, other hardware and software could be used in the same manner as that described. In addition, although only one mail processing routine has been described, other processes could be used to generate mail mesages. Other aspects, such as the specific instructions utilized to achieve a particular function, as well as other modifications to the inventive concept are intended to be covered by the appended claims.
Claims (20)
1. A method for encrypting an electronic message composed by a sender using an abbreviated address book for delivery over a mail system to a recipient who holds a digital certificate, comprising:
(a) when the sender is off-line, inserting an encryption flag in a header associated with the electronic message;
(b) placing the header and the message in plain text in an outbox;
(c) when the sender is on-line, in response to the flag, requesting the digital certificate from the mail system; and
(d) using the received certificate to encrypt the plain text mail message.
2. The method according to claim 1 further comprising:
(e) sending the encrypted mail message to the mail system.
3. The method according to claim 1 further comprising:
(e) when the sender is on-line, if the flag indicates that the message is encrypted, sending the encrypted mail message to the mail system.
4. The method according to claim 1 wherein step (c) comprises:
(c1) requesting the digital certificate from the mail system; and
(c2) if the certificate is unavailable, informing the sender that the message cannot be encrypted.
5. The method according to claim 4 further comprising:
(e) sending the unencrypted mail message in the outbox to the mail system when the message cannot be encrypted.
6. The method according to claim 1 wherein the header comprises information identifying the recipient and step (c) comprises:
(c1) using the identifying information to locate the recipient in the mail system and to retrieve the certificate.
7. Apparatus for encrypting an electronic message composed by a sender using an abbreviated address book for delivery over a mail system to a recipient who holds a digital certificate, comprising:
a mail composer which inserts an encryption flag in a header associated with the electronic message when the sender is off-line, the encryption flag indicating that the electronic message is unencrypted;
a sending mechanism which places the header and the message in plain text in an outbox;
a verification mechanism which is operable when the sender is on-line and, in response to the flag, requests the digital certificate from the mail system; and
an encryption mechanism which uses the received certificate to encrypt the plain text mail message.
8. The apparatus according to claim 7 further comprising:
an outbox mechanism which sends the encrypted mail message to the mail system.
9. The apparatus according to claim 7 further comprising:
a mail mechanism which operates when the sender is on-line and, if the flag indicates that the message is encrypted, sends the encrypted mail message to the mail system.
10. The apparatus according to claim 7 wherein the verification mechanism comprises:
a mechanism which requests the digital certificate from the mail system; and
warning apparatus which informs the sender that the message cannot be encrypted if the certificate is unavailable.
11. The apparatus according to claim 10 further comprising:
an outbox mechanism which sends the unencrypted mail message in the outbox to the mail system when the message cannot be encrypted.
12. The apparatus according to claim 7 wherein the header comprises information identifying the recipient and wherein the verification apparatus comprises:
a locator which uses the identifying information to locate the recipient in the mail system and to retrieve the certificate.
13. A computer program product for encrypting an electronic message composed by a sender using an abbreviated address book for delivery over a mail system to a recipient who holds a digital certificate, the computer program product comprising a computer readable medium having computer readable program code thereon, including:
program code operable when the sender is off-line, for inserting an encryption flag in a header associated with the electronic message, the encryption flag indicating that the electronic message is unencrypted;
program code for placing the header and the message in plain text in an outbox;
program code operable when the sender is on-line and, in response to the flag, for requesting the digital certificate from the mail system; and
program code for using the received certificate to encrypt the plain text mail message.
14. The computer program product according to claim 13 further comprising:
program code for sending the encrypted mail message to the mail system.
15. The computer program product according to claim 13 further comprising:
program code operable when the sender is on-line and, if the flag indicates that the message is encrypted, for sending the encrypted mail message to the mail system.
16. The computer program product according to claim 13 wherein the program code for requesting the certificate comprises:
program code for requesting the digital certificate from the mail system; and
program code for informing the sender that the message cannot be encrypted, if the certificate is unavailable.
17. The computer program product according to claim 16 further comprising:
program code for sending the unencrypted mail message in the outbox to the mail system when the message cannot be encrypted.
18. The computer program product according to claim 13 wherein the header comprises information identifying the recipient and the program code for requesting the certificate comprises:
program code for using the identifying information to locate the recipient in the mail system and to retrieve the certificate.
19. A computer data signal embodied in a computer readable medium for encrypting an electronic message composed by a sender using an abbreviated address book for delivery over a mail system to a recipient who holds a digital certificate, the computer data signal comprising:
program code operable when the sender is off-line, for inserting an encryption flag in a header associated with the electronic message, the encryption flag indicating that the electronic message is unencrypted;
program code for placing the header and the message in plain text in an outbox;
program code operable when the sender is on-line and, in response to the flag, for requesting the digital certificate from the mail system; and
program code for using the received certificate to encrypt the plain text mail message.
20. The computer data signal according to claim 19 further comprising:
program code for sending the encrypted mail message to the mail system.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US09/431,344 US6990578B1 (en) | 1999-10-29 | 1999-10-29 | Method and apparatus for encrypting electronic messages composed using abbreviated address books |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US09/431,344 US6990578B1 (en) | 1999-10-29 | 1999-10-29 | Method and apparatus for encrypting electronic messages composed using abbreviated address books |
Publications (1)
Publication Number | Publication Date |
---|---|
US6990578B1 true US6990578B1 (en) | 2006-01-24 |
Family
ID=35614153
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US09/431,344 Expired - Fee Related US6990578B1 (en) | 1999-10-29 | 1999-10-29 | Method and apparatus for encrypting electronic messages composed using abbreviated address books |
Country Status (1)
Country | Link |
---|---|
US (1) | US6990578B1 (en) |
Cited By (23)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20030154371A1 (en) * | 2001-02-14 | 2003-08-14 | Adrian Filipi-Martin | Automated electronic messaging encryption system |
US20030182566A1 (en) * | 2001-03-09 | 2003-09-25 | Ryoko Kohara | Data storage apparatus |
US20040139314A1 (en) * | 2000-06-15 | 2004-07-15 | Cook David P. | Automatic delivery selection for electronic content |
US20050066185A1 (en) * | 2001-01-17 | 2005-03-24 | Microsoft Corporation | Exclusive encryption |
US20050071330A1 (en) * | 2001-06-06 | 2005-03-31 | Microsoft Corporation | Locating potentially identical objects across multiple computers based on stochastic partitioning of workload |
US20050097313A1 (en) * | 2001-03-21 | 2005-05-05 | Microsoft Corporation | On-disk file format for a serverless distributed file system |
US20050102268A1 (en) * | 2001-03-26 | 2005-05-12 | Microsoft Corporation | Serverless distributed file system |
US20050262552A1 (en) * | 2004-05-05 | 2005-11-24 | Research In Motion Limited | System and method for sending secure messages |
US20050278525A1 (en) * | 2001-03-26 | 2005-12-15 | Microsoft Corporation | Encrypted key cache |
US20070071238A1 (en) * | 2005-09-29 | 2007-03-29 | Research In Motion Limited | System and method for providing an indication of randomness quality of random number data generated by a random data service |
US20070180236A1 (en) * | 2006-01-31 | 2007-08-02 | Kuroyanagi Tomohiro | Communication apparatus, control method thereof, and program |
US20070260876A1 (en) * | 2006-05-05 | 2007-11-08 | Research In Motion Limited | Method and system for sending secure messages |
US20090083536A1 (en) * | 2005-04-15 | 2009-03-26 | Weis Brian E | Method and apparatus for distributing group data in a tunneled encrypted virtual private network |
US20090150675A1 (en) * | 2000-06-15 | 2009-06-11 | Zix Corporation | Secure message forwarding system detecting user's preferences including security preferences |
US20100211795A1 (en) * | 2004-10-29 | 2010-08-19 | Research In Motion Limited | System and method for verifying digital signatures on certificates |
US20100281128A1 (en) * | 2005-07-29 | 2010-11-04 | Research In Motion Limited | System and method for processing messages being composed by a user |
US20100332848A1 (en) * | 2005-09-29 | 2010-12-30 | Research In Motion Limited | System and method for code signing |
US20110040807A1 (en) * | 2000-04-12 | 2011-02-17 | Philippe Giroux | Data management system and method |
US20110271115A1 (en) * | 2002-03-20 | 2011-11-03 | Research In Motion Limited | Certificate information storage system and method |
US8117438B1 (en) * | 2005-12-28 | 2012-02-14 | At&T Intellectual Property Ii, L.P. | Method and apparatus for providing secure messaging service certificate registration |
US20130246549A1 (en) * | 2002-10-18 | 2013-09-19 | Research In Motion Limited | System and method for selecting messaging settings on a messaging client |
US20180262352A1 (en) * | 2015-03-06 | 2018-09-13 | Comcast Cable Communications, Llc | Secure Authentication of Remote Equipment |
US20180331787A1 (en) * | 2015-11-17 | 2018-11-15 | Airbus Defence And Space Limited | Improvements in and relating to communication links |
Citations (11)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5552897A (en) * | 1994-03-07 | 1996-09-03 | At&T Corp. | Secure communication apparatus and method |
US5778071A (en) * | 1994-07-12 | 1998-07-07 | Information Resource Engineering, Inc. | Pocket encrypting and authenticating communications device |
US5815577A (en) * | 1994-03-18 | 1998-09-29 | Innovonics, Inc. | Methods and apparatus for securely encrypting data in conjunction with a personal computer |
US5903651A (en) * | 1996-05-14 | 1999-05-11 | Valicert, Inc. | Apparatus and method for demonstrating and confirming the status of a digital certificates and other data |
US6055240A (en) * | 1997-06-12 | 2000-04-25 | Nortel Networks Corporation | Method and apparatus for message management |
US6292895B1 (en) * | 1998-11-25 | 2001-09-18 | Hush Communication Corporation | Public key cryptosystem with roaming user capability |
US6356937B1 (en) * | 1999-07-06 | 2002-03-12 | David Montville | Interoperable full-featured web-based and client-side e-mail system |
US6381695B2 (en) * | 1997-08-22 | 2002-04-30 | International Business Machines Corporation | Encryption system with time-dependent decryption |
US6430691B1 (en) * | 1999-06-21 | 2002-08-06 | Copytele, Inc. | Stand-alone telecommunications security device |
US20020161709A1 (en) * | 1998-09-11 | 2002-10-31 | Michel Floyd | Server-side commerce for deliver-then-pay content delivery |
US6609114B1 (en) * | 1996-10-24 | 2003-08-19 | M-System Flash Disk Pioneers Ltd. | System for safe collection of payment including electronic payment receipt generators having electronic purses |
-
1999
- 1999-10-29 US US09/431,344 patent/US6990578B1/en not_active Expired - Fee Related
Patent Citations (11)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5552897A (en) * | 1994-03-07 | 1996-09-03 | At&T Corp. | Secure communication apparatus and method |
US5815577A (en) * | 1994-03-18 | 1998-09-29 | Innovonics, Inc. | Methods and apparatus for securely encrypting data in conjunction with a personal computer |
US5778071A (en) * | 1994-07-12 | 1998-07-07 | Information Resource Engineering, Inc. | Pocket encrypting and authenticating communications device |
US5903651A (en) * | 1996-05-14 | 1999-05-11 | Valicert, Inc. | Apparatus and method for demonstrating and confirming the status of a digital certificates and other data |
US6609114B1 (en) * | 1996-10-24 | 2003-08-19 | M-System Flash Disk Pioneers Ltd. | System for safe collection of payment including electronic payment receipt generators having electronic purses |
US6055240A (en) * | 1997-06-12 | 2000-04-25 | Nortel Networks Corporation | Method and apparatus for message management |
US6381695B2 (en) * | 1997-08-22 | 2002-04-30 | International Business Machines Corporation | Encryption system with time-dependent decryption |
US20020161709A1 (en) * | 1998-09-11 | 2002-10-31 | Michel Floyd | Server-side commerce for deliver-then-pay content delivery |
US6292895B1 (en) * | 1998-11-25 | 2001-09-18 | Hush Communication Corporation | Public key cryptosystem with roaming user capability |
US6430691B1 (en) * | 1999-06-21 | 2002-08-06 | Copytele, Inc. | Stand-alone telecommunications security device |
US6356937B1 (en) * | 1999-07-06 | 2002-03-12 | David Montville | Interoperable full-featured web-based and client-side e-mail system |
Non-Patent Citations (6)
Title |
---|
Crocker, D., "Standard for the Format of ARPA Internet Text Messages", RFC-822, IETF, pp. 1-42, Aug. 13, 1982. * |
Crocker, D., Standard for the Format of ARPA Internet Text Messages, RFC-822, IETF, pp. 1-39, Aug. 13, 1982. * |
How to Set up the Paladin E-mail Client, www.circa.ufl.edu/handouts/softdist/paladin.html, pp. 1-6, Aug. 18, 1997. * |
How to Set up the Paladin E-mail Client, www.circa.ufl.edu/handouts/softdist/paladin/paladin.html, pp. 1-6, Aug. 18, 1997. * |
PGP for Personal Privacy, v 5.5, User Guide, Nework Associates, Inc., pp. 1-150, 1998. * |
Ramsdell, B., S/MIME Version 3 Message Specification, RFC-2633, pp. 1-24, Jun. 1999. * |
Cited By (78)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8320405B2 (en) * | 2000-04-12 | 2012-11-27 | Ivor Systems Llc | Data management system and method |
US20110040807A1 (en) * | 2000-04-12 | 2011-02-17 | Philippe Giroux | Data management system and method |
US20090150675A1 (en) * | 2000-06-15 | 2009-06-11 | Zix Corporation | Secure message forwarding system detecting user's preferences including security preferences |
US8972717B2 (en) * | 2000-06-15 | 2015-03-03 | Zixcorp Systems, Inc. | Automatic delivery selection for electronic content |
US20040139314A1 (en) * | 2000-06-15 | 2004-07-15 | Cook David P. | Automatic delivery selection for electronic content |
US9419950B2 (en) | 2000-06-15 | 2016-08-16 | Zix Corporation | Secure message forwarding system detecting user's preferences including security preferences |
US9647971B2 (en) | 2000-06-15 | 2017-05-09 | Zixcorp Systems, Inc. | Automatic delivery selection for electronic content |
US7555656B2 (en) | 2001-01-17 | 2009-06-30 | Microsoft Corporation | Exclusive encryption |
US7571327B2 (en) | 2001-01-17 | 2009-08-04 | Microsoft Corporation | Exclusive encryption |
US7475258B2 (en) | 2001-01-17 | 2009-01-06 | Microsoft Corporation | Exclusive encryption |
US7770023B2 (en) | 2001-01-17 | 2010-08-03 | Microsoft Corporation | Exclusive encryption |
US7685415B2 (en) | 2001-01-17 | 2010-03-23 | Microsoft Corporation | Exclusive encryption |
US20050066183A1 (en) * | 2001-01-17 | 2005-03-24 | Microsoft Corporation | Exclusive encryption |
US20070076881A1 (en) * | 2001-01-17 | 2007-04-05 | Microsoft Corporation | Exclusive Encryption |
US20050066185A1 (en) * | 2001-01-17 | 2005-03-24 | Microsoft Corporation | Exclusive encryption |
US20030154371A1 (en) * | 2001-02-14 | 2003-08-14 | Adrian Filipi-Martin | Automated electronic messaging encryption system |
US7305545B2 (en) * | 2001-02-14 | 2007-12-04 | Globalcerts, Lc | Automated electronic messaging encryption system |
US7392401B2 (en) * | 2001-03-09 | 2008-06-24 | Sharp Kabushiki Kaisha | Data storage apparatus |
US20030182566A1 (en) * | 2001-03-09 | 2003-09-25 | Ryoko Kohara | Data storage apparatus |
US20050097077A1 (en) * | 2001-03-21 | 2005-05-05 | Microsoft Corporation | On-disk file format for a serverless distributed file system |
US20050097313A1 (en) * | 2001-03-21 | 2005-05-05 | Microsoft Corporation | On-disk file format for a serverless distributed file system |
US7539867B2 (en) | 2001-03-21 | 2009-05-26 | Microsoft Corporation | On-disk file format for a serverless distributed file system |
US20050097318A1 (en) * | 2001-03-21 | 2005-05-05 | Microsoft Corporation | On-disk file format for a serverless distributed file system |
US7454612B2 (en) | 2001-03-21 | 2008-11-18 | Microsoft Corporation | On-disk file format for a serverless distributed file system |
US7415608B2 (en) | 2001-03-21 | 2008-08-19 | Microsoft Corporation | On-disk file format for a serverless distributed file system |
US7401220B2 (en) | 2001-03-21 | 2008-07-15 | Microsoft Corporation | On-disk file format for a serverless distributed file system |
US8112452B2 (en) | 2001-03-26 | 2012-02-07 | Microsoft Corporation | Serverless distributed file system |
US7886364B2 (en) | 2001-03-26 | 2011-02-08 | Microsoft Corporation | Encrypted key cache |
US20050102268A1 (en) * | 2001-03-26 | 2005-05-12 | Microsoft Corporation | Serverless distributed file system |
US7346774B2 (en) | 2001-03-26 | 2008-03-18 | Microsoft Corporation | Encrypted key cache |
US20050278525A1 (en) * | 2001-03-26 | 2005-12-15 | Microsoft Corporation | Encrypted key cache |
US20090132552A1 (en) * | 2001-03-26 | 2009-05-21 | Microsoft Corporation | Serverless Distributed File System |
US7505970B2 (en) | 2001-03-26 | 2009-03-17 | Microsoft Corporation | Serverless distributed file system |
US7240060B2 (en) * | 2001-03-26 | 2007-07-03 | Microsoft Corporation | Serverless distributed file system |
US7487245B2 (en) | 2001-06-06 | 2009-02-03 | Microsoft Corporation | Locating potentially identical objects across multiple computers based on stochastic partitioning of workload |
US7444387B2 (en) | 2001-06-06 | 2008-10-28 | Microsoft Corporation | Locating potentially identical objects across multiple computers based on stochastic partitioning of workload |
US7509423B2 (en) | 2001-06-06 | 2009-03-24 | Microsoft Corporation | Locating potentially identical objects across multiple computers based on stochastic partitioning of workload |
US7359937B2 (en) | 2001-06-06 | 2008-04-15 | Microsoft Corporation | Locating potentially identical objects across multiple computers based on stochastic partitioning of workload |
US7272630B2 (en) | 2001-06-06 | 2007-09-18 | Microsoft Corporation | Locating potentially identical objects across multiple computers based on stochastic partitioning of workload |
US20050097148A1 (en) * | 2001-06-06 | 2005-05-05 | Microsoft Corporation | Locating potentially identical objects across multiple computers based on stochastic partitioning of workload |
US7571186B2 (en) | 2001-06-06 | 2009-08-04 | Microsoft Corporation | Locating potentially identical objects across multiple computers based on stochastic partitioning of workload |
US20050071315A1 (en) * | 2001-06-06 | 2005-03-31 | Microsoft Corporation | Locating potentially identical objects across multiple computers based on stochastic partitioning of workload |
US20050071339A1 (en) * | 2001-06-06 | 2005-03-31 | Microsoft Corporation | Locating potentially identical objects across multiple computers based on stochastic partitioning of workload |
US20050071330A1 (en) * | 2001-06-06 | 2005-03-31 | Microsoft Corporation | Locating potentially identical objects across multiple computers based on stochastic partitioning of workload |
US7519623B2 (en) | 2001-06-06 | 2009-04-14 | Microsoft Corporation | Locating potentially identical objects across multiple computers based on stochastic partitioning of workload |
US20070260872A1 (en) * | 2002-02-14 | 2007-11-08 | Globalcerts, Lc | Automated electronic messaging encryption system |
US7644268B2 (en) | 2002-02-14 | 2010-01-05 | Globalcerts, Lc | Automated electronic messaging encryption system |
US20110271115A1 (en) * | 2002-03-20 | 2011-11-03 | Research In Motion Limited | Certificate information storage system and method |
US9807082B2 (en) * | 2002-03-20 | 2017-10-31 | Blackberry Limited | Certificate information storage system and method |
US9032036B2 (en) * | 2002-10-18 | 2015-05-12 | Blackberry Limited | System and method for selecting messaging settings on a messaging client |
US20130246549A1 (en) * | 2002-10-18 | 2013-09-19 | Research In Motion Limited | System and method for selecting messaging settings on a messaging client |
US20050262552A1 (en) * | 2004-05-05 | 2005-11-24 | Research In Motion Limited | System and method for sending secure messages |
US8074066B2 (en) * | 2004-05-05 | 2011-12-06 | Research In Motion Limited | System and method for sending secure messages |
US9621352B2 (en) | 2004-10-29 | 2017-04-11 | Blackberry Limited | System and method for verifying digital signatures on certificates |
US8725643B2 (en) | 2004-10-29 | 2014-05-13 | Blackberry Limited | System and method for verifying digital signatures on certificates |
US20100211795A1 (en) * | 2004-10-29 | 2010-08-19 | Research In Motion Limited | System and method for verifying digital signatures on certificates |
US20090083536A1 (en) * | 2005-04-15 | 2009-03-26 | Weis Brian E | Method and apparatus for distributing group data in a tunneled encrypted virtual private network |
US8250359B2 (en) | 2005-04-15 | 2012-08-21 | Cisco Technology, Inc. | Method and apparatus for distributing group data in a tunneled encrypted virtual private network |
US20100205428A1 (en) * | 2005-04-15 | 2010-08-12 | Weis Brian E | Method and Apparatus for Distributing Group Data In A Tunneled Encrypted Virtual Private Network |
US7761702B2 (en) * | 2005-04-15 | 2010-07-20 | Cisco Technology, Inc. | Method and apparatus for distributing group data in a tunneled encrypted virtual private network |
US8244820B2 (en) | 2005-07-29 | 2012-08-14 | Research In Motion Limited | System and method for processing messages being composed by a user |
US20100281128A1 (en) * | 2005-07-29 | 2010-11-04 | Research In Motion Limited | System and method for processing messages being composed by a user |
US8037149B2 (en) | 2005-07-29 | 2011-10-11 | Research In Motion Limited | System and method for processing messages being composed by a user |
US8516068B2 (en) | 2005-07-29 | 2013-08-20 | Research In Motion Limited | System and method for processing messages being composed by a user |
US8340289B2 (en) | 2005-09-29 | 2012-12-25 | Research In Motion Limited | System and method for providing an indication of randomness quality of random number data generated by a random data service |
US20100332848A1 (en) * | 2005-09-29 | 2010-12-30 | Research In Motion Limited | System and method for code signing |
US9077524B2 (en) | 2005-09-29 | 2015-07-07 | Blackberry Limited | System and method for providing an indication of randomness quality of random number data generated by a random data service |
US20070071238A1 (en) * | 2005-09-29 | 2007-03-29 | Research In Motion Limited | System and method for providing an indication of randomness quality of random number data generated by a random data service |
US8452970B2 (en) | 2005-09-29 | 2013-05-28 | Research In Motion Limited | System and method for code signing |
US8117438B1 (en) * | 2005-12-28 | 2012-02-14 | At&T Intellectual Property Ii, L.P. | Method and apparatus for providing secure messaging service certificate registration |
US20070180236A1 (en) * | 2006-01-31 | 2007-08-02 | Kuroyanagi Tomohiro | Communication apparatus, control method thereof, and program |
US8826012B2 (en) * | 2006-01-31 | 2014-09-02 | Ricoh Company, Ltd. | Communication apparatus, control method thereof, and program |
US20070260876A1 (en) * | 2006-05-05 | 2007-11-08 | Research In Motion Limited | Method and system for sending secure messages |
US20180262352A1 (en) * | 2015-03-06 | 2018-09-13 | Comcast Cable Communications, Llc | Secure Authentication of Remote Equipment |
US10680835B2 (en) * | 2015-03-06 | 2020-06-09 | Comcast Cable Communications, Llc | Secure authentication of remote equipment |
US11736304B2 (en) | 2015-03-06 | 2023-08-22 | Comcast Cable Communications, Llc | Secure authentication of remote equipment |
US20180331787A1 (en) * | 2015-11-17 | 2018-11-15 | Airbus Defence And Space Limited | Improvements in and relating to communication links |
US10887054B2 (en) * | 2015-11-17 | 2021-01-05 | Airbus Defence And Space Limited | Communication links |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US6990578B1 (en) | Method and apparatus for encrypting electronic messages composed using abbreviated address books | |
US6539093B1 (en) | Key ring organizer for an electronic business using public key infrastructure | |
TW396308B (en) | Document delivery system | |
US6728378B2 (en) | Secret key messaging | |
US6487599B1 (en) | Electronic document delivery system in which notification of said electronic document is sent a recipient thereof | |
US8429233B2 (en) | Method and system for journaling electronic messages | |
US7251728B2 (en) | Secure and reliable document delivery using routing lists | |
TW202103036A (en) | System and method for issuing verifiable claims | |
US7277901B2 (en) | Collaborative file update system | |
US5862325A (en) | Computer-based communication system and method using metadata defining a control structure | |
US8281125B1 (en) | System and method for providing secure remote email access | |
US6757710B2 (en) | Object-based on-line transaction infrastructure | |
US6732277B1 (en) | Method and apparatus for dynamically accessing security credentials and related information | |
US6345288B1 (en) | Computer-based communication system and method using metadata defining a control-structure | |
US7284121B2 (en) | System and method for transmitting reduced information from a certificate to perform encryption operations | |
US20020116467A1 (en) | Method and apparatus for synchronizing an email client on a portable computer system with an email client on a desktop computer | |
US20040153451A1 (en) | Methods and systems for sharing data | |
US20020004773A1 (en) | Method and a system for certificate revocation list consolidation and access | |
WO1998043271A1 (en) | Universal domain routing and publication control system | |
JP2004005404A (en) | System which dynamically delivering electronic document via network | |
WO1998043185A1 (en) | Dynamic group registry apparatus and method | |
WO1998043171A1 (en) | Client side communications server apparatus and method | |
US20060143278A1 (en) | Method and system for distributing e-mail messages to recipients | |
JP4006214B2 (en) | Data search system, data relay server, database server, and database access method | |
GB2382176A (en) | A method and apparatus for providing a reminder service |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AS | Assignment |
Owner name: INTERNATIONAL BUSINESS MACHINES CORP., NEW YORK Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:BECKHARDT, STEVEN R.;O'BRIEN, MICHAEL R.;LORENSON, ELIZABETH A.;AND OTHERS;REEL/FRAME:010466/0141;SIGNING DATES FROM 19991207 TO 19991213 |
|
FEPP | Fee payment procedure |
Free format text: PAYOR NUMBER ASSIGNED (ORIGINAL EVENT CODE: ASPN); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY |
|
REMI | Maintenance fee reminder mailed | ||
LAPS | Lapse for failure to pay maintenance fees | ||
STCH | Information on status: patent discontinuation |
Free format text: PATENT EXPIRED DUE TO NONPAYMENT OF MAINTENANCE FEES UNDER 37 CFR 1.362 |
|
FP | Lapsed due to failure to pay maintenance fee |
Effective date: 20100124 |